Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/wOab5qI0t4FofSq03RGvaYJ4_o0.roa
File:                     wOab5qI0t4FofSq03RGvaYJ4_o0.roa (raw, json)
Hash identifier:          ypLvXSFmWVWlhloxb/9tsuiDF7HDThEvZjOHieXfHbs=
Subject key identifier:   C0:E6:9B:E6:A2:34:B7:81:68:7D:2A:B4:DD:11:AF:69:82:78:FE:8D
Certificate issuer:       /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial:       018CC726B2D38BFE9B27D2AC6A2FFCF71707
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/wOab5qI0t4FofSq03RGvaYJ4_o0.roa
Signing time:             Mon 01 Jan 2024 22:30:51 +0000
ROA not before:           Mon 01 Jan 2024 22:30:51 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     41179
IP address blocks:        80.90.7.0/24 maxlen: 24
                          2a02:cb43:2003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:26:b2:d3:8b:fe:9b:27:d2:ac:6a:2f:fc:f7:17:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
        Validity
            Not Before: Jan  1 22:30:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c0e69be6a234b781687d2ab4dd11af698278fe8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c8:32:55:b7:4b:d4:14:6b:40:00:91:48:2a:
                    18:d4:39:78:45:18:4c:59:6e:6b:25:b6:c1:c5:b3:
                    1b:0e:cd:4e:c2:9a:95:64:62:94:f0:a8:8c:6c:3f:
                    75:d9:fe:46:10:75:6b:1e:18:12:e0:89:f1:22:4f:
                    01:e4:52:93:27:bf:ac:ce:9b:a8:09:bf:34:73:97:
                    3e:1f:ec:60:57:b7:d1:da:e5:99:16:db:a2:ec:85:
                    21:7d:c1:53:5b:7f:d7:34:4b:c4:9a:a3:dd:07:6e:
                    2b:18:a4:65:f5:a6:cf:d1:1a:82:55:05:f8:12:d1:
                    ff:a3:af:cf:c1:a2:ed:45:a6:38:cc:e8:75:00:76:
                    04:a1:d2:74:5f:04:cd:a4:ee:87:0d:c0:ed:78:92:
                    50:76:2d:73:10:4b:a2:ee:19:38:90:8e:68:1c:56:
                    e2:1e:42:85:3b:1d:de:e4:b2:7b:df:6a:8f:78:ba:
                    f9:40:5c:4b:1a:88:08:a5:5a:1e:e1:4a:31:23:ab:
                    94:a8:45:fe:a2:ea:cc:67:44:59:de:cf:7e:fb:1d:
                    a2:a6:04:30:0e:25:86:16:bd:e5:98:84:ba:b6:ca:
                    a3:cb:ec:bb:14:d1:63:77:9d:66:c7:56:43:c8:38:
                    04:63:3d:fc:15:5d:ed:6e:5a:9a:1b:3a:42:c0:c8:
                    34:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E6:9B:E6:A2:34:B7:81:68:7D:2A:B4:DD:11:AF:69:82:78:FE:8D
            X509v3 Authority Key Identifier:
                keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/wOab5qI0t4FofSq03RGvaYJ4_o0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.90.7.0/24
                IPv6:
                  2a02:cb43:2003::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:98:65:36:5b:07:b8:48:15:c4:d7:14:3d:87:ae:a3:b7:db:
         6a:7d:16:0b:f5:26:8f:33:f0:ee:2b:92:ca:43:64:41:64:41:
         d5:74:79:f6:29:30:07:d0:0f:7c:3e:53:50:e8:fb:66:5b:3a:
         16:ea:2b:b9:9c:6d:ec:7e:c7:aa:b6:22:eb:ba:8a:37:14:2f:
         1f:c0:62:d2:3e:51:99:63:71:a0:e8:bc:9c:06:c5:ca:11:ac:
         7d:78:61:48:c9:04:17:d1:6a:99:0f:e4:4a:04:7c:9b:76:20:
         91:56:07:ee:c6:dc:48:aa:9e:2a:b7:0e:66:a0:3e:7a:fa:a2:
         12:8d:88:a3:1d:2a:5d:b2:8d:cc:f1:1f:a5:30:cc:fe:1a:a1:
         74:ae:4e:fc:72:ef:db:26:f3:49:52:1a:72:0c:fe:cc:9b:80:
         b0:db:a4:61:70:73:fe:50:a1:fc:44:a8:18:07:32:93:aa:19:
         8d:ba:14:4a:c0:d9:c7:0a:5e:6e:5b:15:d1:a0:47:a4:40:3e:
         10:f5:6e:3f:07:9b:60:a5:75:b1:3d:06:b1:50:55:bc:6b:a0:
         65:2c:ad:f3:7a:4b:01:ed:47:cb:30:98:a9:58:85:a3:f6:7a:
         d7:ac:10:b5:83:59:a1:9f:b2:86:9f:9f:a0:54:31:f9:a7:13:
         76:14:fa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----